From open-source supply chain risks to sophisticated state-sponsored threats, this week’s cybersecurity headlines highlight why staying ahead of vulnerabilities is more important than ever. Attackers are exploiting outdated tech, infiltrating infrastructure for months undetected, and deploying backdoor malware against major networking companies. Meanwhile, critical security patches have been released across Microsoft, Adobe, Apple, and Fortinet—underscoring the need for rapid response and updates. Read on to stay informed and prepared.
Malicious Packages Exploiting Open-Source Platforms Are on the Rise
Attackers are injecting malicious packages into widely used open-source repositories, compromising supply chains and software applications. This method allows cybercriminals to spread malware at scale, impacting both developers and end users.
Read more on HackRead
UK Government Calls for Stronger Open-Source Supply Chain Security
A new UK government report highlights the growing threats posed by vulnerabilities in open-source software supply chains. The report urges organizations to implement stricter security practices to mitigate the risks of dependency hijacking and compromised libraries.
Read more on SecurityWeek
Chinese-Linked Backdoor Malware Found in Juniper Networks Devices
Security researchers have uncovered a sophisticated backdoor linked to Chinese state-sponsored hackers embedded in Juniper Networks devices. The discovery raises concerns about long-term espionage efforts targeting enterprise and government networks.
Read more on InfoSecurity Magazine
Old Technology: A Hidden Security Risk Organizations Need to Address
Many organizations fail to properly dispose of outdated technology, leading to data breaches and security risks. Experts warn that improperly discarded devices can expose sensitive information if not securely wiped before disposal.
Read more on HelpNetSecurity
560,000 People Impacted in Four Separate Healthcare Data Breaches
The healthcare sector continues to be a prime target for cyberattacks, with four recent data breaches affecting over half a million patients. Compromised data includes personal health records, financial information, and insurance details.
Read more on SecurityWeek
China’s Volt Typhoon Hackers Dwelled in U.S. Electric Grid for 300 Days
A newly disclosed report reveals that Chinese Volt Typhoon hackers maintained covert access to parts of the U.S. electric grid for nearly a year. The breach raises alarms over the security of critical infrastructure and the potential for future cyber sabotage.
Read more on SecurityWeek
Fortinet Patches 18 Vulnerabilities in Latest Security Update
Fortinet has released patches for 18 vulnerabilities, including critical flaws that could allow remote code execution. Users of Fortinet security products should update immediately to mitigate risks.
Read more on SecurityWeek
Adobe’s Patch Tuesday Fixes Critical Code Execution Bugs in Acrobat and Reader
Adobe has issued security patches addressing multiple critical vulnerabilities in Acrobat and Reader that could allow remote attackers to execute arbitrary code. Organizations using Adobe products should prioritize these updates.
Read more on SecurityWeek
Apple Fixes WebKit Zero-Day Exploited in ‘Extremely Sophisticated’ Attacks
Apple has released a security update patching a WebKit zero-day vulnerability that has been actively exploited in highly targeted attacks. Mac, iPhone, and iPad users should update their devices immediately.
Read more on BleepingComputer
Microsoft March 2025 Patch Tuesday Fixes Seven Zero-Days and 57 Flaws
Microsoft’s latest Patch Tuesday addresses 57 vulnerabilities, including seven actively exploited zero-day flaws. These patches impact Windows, Exchange, and other critical Microsoft products, making immediate updates essential for security.
Read more on BleepingComputer
HopeNet reviews a variety of security news sources so you do not have to! This list is curated specifically for churches, nonprofits, and other Organizations of Hope. The headlines and our added comments are meant to provide enough to get an overview of recent happenings, but links are also provided for readers that want to explore certain topics deeper.
If this was shared with you and you would like to receive a copy directly to your email, please sign up for this FREE newsletter at HopeNetCISO.com. Also, check out the Services section of our site for ways we can help! Thanks for reading!
Leave a Reply